On 08/26/2014 04:28 PM, Reindl Harald wrote:

Am 26.08.2014 um 15:54 schrieb Axb:
On 08/26/2014 03:00 PM, Reindl Harald wrote:
Am 26.08.2014 um 14:25 schrieb Joe Quinn:
On 8/26/2014 8:04 AM, Reindl Harald wrote:
sadly the Wiki don't refer to check_rbl()
https://wiki.apache.org/spamassassin/WritingRules

You can use KAM.cf for reference.

http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf
Search for KAM_FROM_URIBL_PCCC

thanks, looks like the missing identifier as first
params was the reason for the error but the rule
below still don't fire and the connecting IP is
on the list, recently verified again

may the problem be that "header" looks in received
headers and not at the connecting physical IP?

header   RCVD_IN_TL_DNSWL_HIGH eval:check_rbl('custom-dns-1', 
'dnswl.thelounge.net.', '127.0.0.2')
describe RCVD_IN_TL_DNSWL_HIGH Custom DNSBL/DNSWL
tflags   RCVD_IN_TL_DNSWL_HIGH net
score    RCVD_IN_TL_DNSWL_HIGH -5

see 20_dnsbl_tests.cf file for a  "lastexternal" sample

if it only would work - see below

the 4 lines are part of "local.cf" where other settings
are working fine - strange :-(

* example
* mine
* log-result

# Return Path Reputation Network Blacklist (RNBL):
# https://senderscore.org/blacklistlookup/
header RCVD_IN_RP_RNBL         
eval:check_rbl('rnbl-lastexternal','bl.score.senderscore.com.')
describe RCVD_IN_RP_RNBL       Relay in RNBL, 
https://senderscore.org/blacklistlookup/
tflags RCVD_IN_RP_RNBL         net

header   RCVD_IN_RP_TLDNS1 eval:check_rbl('tldns1-lastexternal', 
'dnswl.thelounge.net.')
describe RCVD_IN_RP_TLDNS1 Custom DNSBL/DNSWL
tflags   RCVD_IN_RP_TLDNS1 net
score    RCVD_IN_RP_TLDNS1 -5

spamd: result: Y 9 -
ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,BAYES_99,BAYES_999,DEAR_SOMETHING,DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,LOTS_OF_MONEY,SPF_SOFTFAIL,T_MONEY_PERCENT,URG_BIZ
scantime=0.4,size=8639,user=sa-milt,uid=189,required_score=1.0,rhost=localhost,raddr=127.0.0.1,rport=29655,mid=<762711c0cdde92c967fe5f98b4054c4ceadd18a41409062805@******>,bayes=1.000000,autolearn=disabled


assuming your using rbldnsd, do you have the resolver forwarding to the dnswl.thelounge.net zone?
does dnswl.thelounge.net have an A record
have you configured a testpoint in dnswl.thelounge.net? if yes, can you resolve it with dig?




Reply via email to